Security Bulletin: Vulnerability in Service Assistant affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (CVE-2018-1775)

Summary A vulnerability in the Service Assistant GUI affects IBM SAN Volume Controller, IBM Storwize V7000, V5000, V3700 and V3500, IBM Spectrum Virtualize Software, IBM Spectrum Virtualize for Public Cloud and IBM FlashSystem V9000 and 9100 family products. Vulnerability Details CVEID:...

IBM San Volume Controller / Storwize / FlashSystem Arbitrary File Read (CVE-2018-1775)

According to its self-reported version number, the IBM San Volume Controller, Storwize or FlashSystem is vulnerable to an arbitrary file read vulnerability which exists in the service assistant GUI. An authenticated, remote attacker can exploit this, to read arbitrary files and disclose sensitive...

Security Bulletin: A vulnerability affects the IBM FlashSystem V840

Summary There is a vulnerability to which the FlashSystem™ V840 is susceptible. An exploit of this vulnerability could make the system subject to an attack where an unauthenticated user could download arbitrary files form the operating system. Vulnerability Details CVEID: CVE-2018-1775 DESCRIPTIO...

CVE-2018-1775

CVE-2018-1775 affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products. The vulnerability allows an authenticated user to download arbitrary files from the operating system via the Service Assistant GUI. Affected software includes versions 7.5 through ...